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AMENDMENTS TO THE CLAIMS 

This listing of claims replaces all prior versions and listings of claims in the application: 
Listing of Claims 

1 . (Currently Amended) A method of access control for a movable 
network managed by a mobile router, wherein said mobile router is interconnected 
through a bi-directional link with a mobility anchoring agent that anchors the network 
mobility for the mobile router, said method comprising the steps of: 

oxoroioing acoooo contro l filtering at the mobility anchoring agents to f i ltor 
downlink packets to said mobile router to eliminate unauthorized downlink packets 
before the packets are transmitted over an air interface : and 

exorcising oooooo contro l filtering at said mobile router^ to filtor uplink packets to 
said mobility anchoring agent to eliminate unauthorized uplink packets before the 
packets are transmitted over the air interface . 

2. (Original) The method of claim 1 , wherein said mobility anchoring 
agent is a home agent in a home network of said mobile router. 

3. (Original) The method of claim 1 , wherein said mobility anchoring 
agent is a local forwarding agent in a visited network. 

4. (Original) The method of claim 1, wherein said mobility anchoring 
agent runs a NEMO-based (Network Mobility) mobility support protocol with said mobile 
router. 

5. (Currently Amended) The method of claim 4, wherein said mobile 
router is interconnected with said mobility anchoring agent through a NEMO bi- 
directional tunnel, and the mobility anchoring agent filters downlink packets ar e filtered 
before said NEMO bi-directional tunnel, and the mobile router filters uplink packets afe 
filter e d before said NEMO bi-directional tunnel. 
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6. (Currently Amended) The method of claim 1 , wherein said step of 
oxorcioing aocooo contro l filtering dow nlink packets at the mobility anchoring agent 
involvo ° includes checking headers of downlink IP packets that traverse an access 
control point in said mobility anchoring agent, and said step of exorcising aocooo control 
filtering uplink packets at said mobile router involv o o includes checking headers of 
upjjnk IP packets that traverse an access control point in said mobile router. 

7. (Currently Amended) The method of claim 1 , further comprising the 
step of provisioning Han]] a first access control module at said mobility anchoring agent 
and [[an]] a second access control module at said mobile router with provisioning 
information from an access control source. 

8. (Currently Amended) The method of claim 7, wherein said 
provisioning step comprises the steps of: 

transferring provisioning information for the first and second access control 
modules in both oaid mobi l ity anchoring ag e nt and oa i d mobilo routor from said access 
control source to said mobility anchoring agent; and 

subsequently forwarding provisioning information for the second access control 
module in oaid mob i lo routor from said mobility anchoring agent to said mobile router 
over the bi-directional link. 

9. (Currently Amended) The method of claim 8, wherein said 
provisioning information for the second access control module in oaid mobilo routor 
includes provisioning information related only to the uplink from said mobile router to 
said mobility anchoring agent. 

10. (Canceled) 
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1 1 . (Previously Presented) The method of claim 7, wherein said access 
control source is implemented in an Authentication, Authorization and Accounting (AAA) 
client, and provisioning information related to a node in said movable network is 
transferred from an AAA server associated with the home network of said node to said 
AAA client and the access control source. 



12-15. (Canceled) 



1 6. (Currently Amended) An arrangement for access control for a 
movable network managed by a mobile router, wherein said mobile router is 
interconnected through a bi-directional link with a mobility anchoring agent that anchors 
the network mobility for the mobile router, said arrangement comprising: 

means for e xorcising aocooo contro l filtering at the mobility anchoring agent, te 
fittef downlink packets to said mobile router to eliminate unauthorized downlink packets 
before the packets ar e transmitted over an air interface : and 

means for exoroio i ng aocooo control filtering at said mobile router, te-fittef uplink 
packets to said mobility anchoring agent to eliminate unauthorized uplink packets before 
the packets are transmitted over the air interface 



17-18. (Canceled) 



19. (Original) The arrangement of claim 16, wherein said mobile router 
and said mobility anchoring agent are configured to run a NEMO-based (Network 
Mobility) mobility support protocol. 



20. (Currently Amended) The arrangement of claim 1 9, wherein said 
mobile router is interconnected with said mobility anchoring agent through a NEMO bi- 
directional tunnel, and said aocooo control oxoroioing filtering means at said mobility 
anchoring agent io oporablo for filtering ooid filters the downlink packets before said 
NEMO bi-directional tunnel, and said aocooo contro l oxoroioing filtering means at said 
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mobile router is n no nhl o for filtering ouid fjjterethe uplink packets before said NEMO bi- 
directional tunnel. 



21-30. (Canceled) 



31 . (Currently Amended) A mobility anchoring agent for anchoring 
network mobility for a mobile router that manages a movable network, wherein said 
mobility anchoring agent comprises: 

means for i ntorconnoction interconnecting with said mobile router through a bi- 
directional link; and 

means for exorc i s i ng aococo control to mon i tor and fi l ter monitoring and filtering 
downlink packets to said mobile router to eliminate unauthorized downlink packets 
before the downlink pac kets are transmitted over the bi-directinnal link 

32. (Original) The mobility anchoring agent of claim 31 , wherein said 
mobility anchoring agent is configured to run a NEMO-based (Network Mobility) mobility 
support protocol with said mobile router. 



33. (Currently Amended) The mobility anchoring agent of claim 31 claim 
32, wherein said mobility anchoring agont io conf i gured for intorconnoct i on the means 
for interconnecting with said mobile router tiweugh includes a NEMO bi-directional 
tunnel, and said means for exoroininn nrrnrr ™ntrr,| ; n nprmblo for f i ltering caid 
monitoring and filtering filters the downlink packets before said NEMO bi-directional 
tunnel. 



34. (Currently Amended) The mobility anchoring agent of claim 31 , 
wherein said means for exorcic i ng acooco contro l io oporablo for chocking monitoring 
and filtering checks headers of packets that traverse an access control point in said 
mobility anchoring agent. 
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35. (Currently Amended) The mobility anchoring agent of claim 31 , 
further comprising: 

means for receiving provisioning information for access control at both said 
mobility anchoring agent and said mobile router from an access control source; and 

means for forwarding provisioning information for access control at said mobile 
router to said mobile router. 



36. (Original) The mobility anchoring agent of claim 35, wherein said 
provisioning information for access control at said mobile router includes information 
related only to the uplink from said mobile router to said mobility anchoring agent. 



37. (Canceled) 



38. (Currently Amended) An access control enforcement module for 
operation with a mobility anchoring agent that anchors network mobility for a mobile 
router managing a movable network, said mobile router being interconnected through 
bi-directional link with said mobility anchoring agent, wherein said access control 
enforcement module i s oporablo for oxoroioing aooooo control to monitor and fi l tor 
includes means for monitoring and filtering downlink packets to said mobile router to 
eliminate unauthorized downlink packet s before the downlink packets are transmitted 
over the bi-directional link 
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